[emeryberger]

FWIW the attack we describe in the paper works against MOSS, too (that was the original inspiration for the name, “Mossad”).